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K . , . . - METHOD AND, SYSTEM FOR IDENTIFYING A JURIDICAL PERSON 

* - ... 

V*"' 1 *^ ^ Field of Invention 

1 ' " The present invention pertains to a method and a system for identifying a juridical 
" ■ ' person in, order to provide said juridical person access to a service such as payment transaction* 
facility access transaction etc. 

5- . . , „ . Background Art . . 

In a GSM base d payment system, a consumer can pay for a purchase using his/her 
GSM phone. The consumers phone bill is then debited the purchase amount. 

Technical realisation of such payment system requires from the consumer nothing but 
an ordinary GSM telephone. 
10 ° ne of the weakest points of this implementation is the control of credit worthiness of 

the consumer. A consumer who has e.g. not paid his/her phonebill during the past half year is 
an unwanted entity in the payment scheme. Therefore, GSM based payment schemes have only 
been implemented for very small payment amounts so far, e.g. in soda machines. This to reduce 
the financial risks. 

15 Advertisements nowadays are either non-targeted or then they are non-automised. Today 
advertising can be targeted and automated to varying degrees depending on the medium. 

Mass media (TV, radio, print, outdoor) is not very targeted; delivering advertising 
messages to, at best, a collection of like-minded consumers. 

Paper coupons can be used to drive purchases, yet are expensive to administer and 
20 tend to lead to "price-shoppers". 

The Internet has opened up opportunities for better targeting and automation. For 
example, the on-line book retailer "amazon.conT uses past individual shopping behavior to 
provide recommendations based on what other people with similar shopping patterns have 
purchased. Such recommendations do however not provide individuals with specific offers that 
25 not available tb others arid do not reach people shopping in the physical world. 

*■"" ' In USTatent'No. 5,5^0,197 there is disclosed a cyber waiiet in the form of stored and' 
protected account information, which may be "carried" on a tamper resistant portable electronic 
storage medium such as a smartcard, or stored on the customer's computer (or personal digital 
assistance, PCMCIA card, or the like) together with the browser/mosaic software^ is provided 
30 to a customer for the purpose of making electronic payments from the" possessor of the wallet to 
^ a merchant at a remote site on the Internet. Securing of the information contained in the wallet 
is provided by a public key file containing public keys to be used for encrypting the payment 
information into an authorisation ticket which is sent by the wallet to the merchant, and then 
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forwarded to the account servicer for decryption, the decryption key being in the form of a 
private key held only by the account servicer, and to whichmMgrehanrand otfier^fties have 
no access; The public key file preferablycontains a plurality of public keys selectable by an 
identifier associated with but not a part of the key itself, so that the account* servicer can ^ 
control, by having the merchant send an identifier to the wallet, the selection of 
uncompromised;keys without anyone but the servicer having knowledge of which key is being 

selected.-This* solutionis rather complicated. 

Summary of the disclosed invention 
The present invention relates to a method and a system for providing access to a 
service such las a paynidrit access transaction, a facility access trans action, "ra ' 
bonus or loyalty scheme access etc. 

An aspect of the invention is to solve problems related to an automatic payment 
transaction through for example a mobile phone system such as the GSM or, or other 
telephone like communication device, further referred to as telephone device. 

Another aspectof the present invention provides a door passage inlet, the door 
having no keypad or other physically accessing means from' outside the facility.' 

Yet another aspect of the present invention is to make called telephone numbers 
decide which service is asked for among a plurality of services. u * . < w : 

The aspects are accomplished through CLI-riumber recdgrii tidn when 

establishing a call and not letting the call being received through off-hook detection by a 
called party. 

A method for identifying a juridical person in order to provide said juridical 
person access to a provided service is thus set forth through the present invention. It 
comprises the retrieval of the CLI-number provided to a telephone device used by said 
juridical person: The CLI-number being part of the phone communication protocol and being 
retrieved at a service unit telephone device or a clearing unit telephone device,-resp^ctively; : - 
during , a phone.call connection trial without establishing the comriiunication; whereby the call - 
is refused, at the service uhit or the clearing unit, respectively, which are adapted to refuse a 
call. The service unit establishes a*communication io a clearing unit which always decides if 
the received CLI-ntimber has access to the service provided; thus : providing | the r service if r ' ^ c 
accesiis^tabIish(^/^^V;K^ - ■•• v ; : ??- <:':""::\\j 'v 

i'. In one embodiment of the invention the service is a payment transaction. 
In another embodiment of the present invention the service is a facility access 

transaction. 
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* J. ^ I P^ e embodiment comprises that a service category calied for is dependent on 
the telephone numbe^dialed,*i;e:, the service, e.g. payment or facility access, depict is : - - 1 
dependent on the dialed telephone number ' rf T • w - : t; 

A further embodiment comprises that a facility access does not have any- ^ 
physically accessible locking means from outside the facility for entering the facility. The 
service unit> is attached inside the facility in another embodiment, thus preventing vandalizing. 
An inside attachment prevents a person from noticing the existence of means for entering the 
facility from the outside of it in one embodiment of the invention. 

A still further embodiment comprises that the clearing unit checks if the 
received CLI-number is stored in a connected computer database. If £6, looking for 
information corresponding to : said CLI-number, and If the CLI-number is stored in the 
computer database and if the related information qualifies the user of that CLI-number to have 
access to the said service, the clearing unit sends an access confirmation to the service unit. 

Yet another embodiment comprises that the user is notified to his/her telephone 
device of a service. A notification is, in one embodiment transmitted via an SMS message or 
the like from the service unit or the clearing unit, which thus comprise a GSM means or the 
like for transmission of the SMS. 

, . Further the present invention sets forth a system for identifying a juridical 
person in order to provide said juridical person access to a provided service. It comprises: 

a telephone device with a CLI-number, the device being allocated to said 
person, and said CLI-number being part of the phone communication protocol; 

a service unit device and a clearing unit device, being connected to a computer 
database, which decides if the received CLI-number has access to the service provided, 
whereby at least one of them comprises a unit telephone device to be called by said person 
with said telephone; \ - 

~ retrieval means at the service unit or the clearing unit for the CLI-niimber during 
a.phone call connection trial, being adapted not to establish the, whereby a call is refused at 
the unit telephone device; T ahd : 5 r — .. :' 4 
' •'.v>;-v.'" v ..said service -unit providing'the service if access is^granted/* '*" 1 ; 
; 7 1 * Further embodiments of the present invention are set forth through attached ; : 
depend^tcl^^ above system is able to perform embodiments of the 

method described above. , / . v ,,". 

Brief Description of the Drawings 
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Henceforth reference is had to the accompanying drawings for a better understanding of 
the presraV invention ~ ? v 

: ^'Fig. 1" illustrates a block diagram 'of an autKorizatioh'system; -^v*--"^ 

- Fig. 2 illustrates a schematic exemplification of a specific application of an 

authorization system; s 

Fig. 3 illustrates a flow chart of a method for giving authorization regarding payment 

from a consumer to a retailer; ~ "* — • ? > 

Fig. 4 illustrates a schematic exemplification of a specific application of a targeted 
automated advertisement system; 

Fig. 5' illustrates a schematic block diagram of one embodiment; of ,v the c "present 
invention for the authentication and identification of a user to provide said user aiccess to a 
specific service; 

Fig. 6 illustrates a schematic block diagram of another embodiment of the present 
invention for the authentication and identification of a user to provide said user access to a 
specific service; 

Fig. 7 illustrates a schematic block diagram of a further embodiment of the present 
invention authentication and identification of a user to provide said user access to a service; 

Fig. 8 illustrates a schematic block diagram of yet another embodiment of the present 
invention for the authentication and identification of a user to provide saiti user access to a 
specific service; 

Fig. 9 illustrates a schematic block diagram based on the embodiments according to 
Fig. 5 to Fig. 8 depicting a specific service in a payment system; and ^ 

Fig. 10 illustrates a schematic block diagram based on the embodiments in 
accordance with Fig. 5 to Fig. 8 and explains a specific service regarding a facility access 
.system , . >• v>: - *«->. • : : ~ > - 



Description of Preferred Embodiments 

The attached Fig. 1 to Fig. 4 and the accompanying text of the present invention 
relate to the Swedisltpa^ filed July 20, 1999. " " ' ; ' ' ' ' 

In Fig 1, there is disclosed an authorization system 1 [bT The'Tystem 10 : comprises at 
least one source unit 12 and at least one destination unit 14i, 14 n . The system 10 can 
coniprise, but not necessarily, a communication means 16 forcommunicatibn between said 
source unit 1 2 and said destination units 1 4 1 1 4a Said system 1 0 also comprises an 
authorization unit 18 and communication means 20 for communication both between said 
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authorization unit 18 and said source unit 12 and said authorization unit 1 8 and said 
destination units 14iv v.. i 14 n v Said authorization imit 1 8_cdmprises a memory means 22, iri - 
Which there is ^stbr^d validity information about said at least one.source unit 12. .Said 
authorization uniM8 checks the validity information before. a decision is made whether said:, 
source unit gets authorized to perform said specific task. Said memory means 22 can e.g. be ir 
form of a database 22. Said system lOalso comprises a clearing means 24 connected to said 

authorization unit ULS.aid clearing means 24 ensures and/or executes, any payment ^ 

transaction between e.g. a consumer and a retailer with or without the usage of any 
middleman;; * ; 

, : It is hereby.pointed oufcthat in this application the expression consumer means 
anyone who is paying and the expression retailer means anyone who is receiving money in a 
payment scheme. 

Any of the said communication means 16, 20 can e.g. be optical or infra red 
communication links, electronic bus system, or mobile communication means. 

Any of the said mobile communication means can e.g. be microwave communication 
means, radio communication means, or based on the NMT, GSM, or WCDMA standard. 

Any of the said communication means 1 6, 20 can also be telephone means, or be 
based on the Internet standard: 

According to one embodiment, said source unit 1 2 is designated to a specific 
consumer and each destination unit 14i, 14 n is a point of sale unit (P.O.S). Said system 10 
comprises also a to said memory means 22 connected clearing means 24. In Embodiment one 
said validity information comprises the credibility of each consumer. Said authorization unit 
18 uses the credibility of each consumer and payment data received from a point of sale unit 
14i, 14n as a base for taking the decision whether payment is approved or not. When said 
payment^ approved, said point of sale unit 14i, 14n delivers any kind of purchase proof . 
^F:^^ : ^^}^0 m ^^^^^S9 for said consumer. This purchase-proof can? e.g. bea cash > 

ticket.: v: . ...... ; .<... -., 

i f According tp r another embodiment, which is based on the previous embodiment, said 
system^ 10 comprises also an advertisement system 26 connected to said memory means 22. In. 
Embodiment; two^sai^, validity info comprises .informatipn,abput;advertise^ , 

coupled financial benefits of each consumer. Said authorizatiomunit 18 uses the information 
about advertisement coupled financial benefits of each consumer and purchase data received 
from a point of sale unit 14 \ , . . . , 1 4n as a base for taking the decision whether payment is 
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approved or riot and whether a financial benefit has to be taken into account by the' clearing : 

— According to yet another embodiment, each of s aid Source uhirl 2*is"designated to a 
** ' • " 

specific machine user and each destination unit 14*, 14ri is a single component in a' 

specific macfiine. Said validity information comprises the state of each said component and * 

data about each said machine user. - 

In Fig 2 there is disclosed a specific application of an authorization syistemr ' ' *" 

It relates to a method of authorization in communication schemes in which a 

particular source communicates with a particular entity (destination) that is part of a " 

distributed system? First a ^oi^explahatibh of the above te i*r..*.i;;:>».-. 

The communication scheme: " * t 

This is a particular application where a certain communication between source and 

destination is wanted and which requires some kind of authorization. 

Some examples of such distributed systems are: 

Electronic parking meters, paid using the driver's mobile phone 

A machine, in which e.g. every single component in the machine can be controlled in 

a remote way by one or different machine users. 

A remote (Intemet/telephone/GSM) control system for electronic equipment in a 
building or more specifically a house (cf the bliietooth bommunicatibn standard) 
An electronic payment system 
A targeted publicity system 

Components, connected by an electronic bus system 

Vending machine, piaid using the purchaser's mobile phone. 

The physical information carrier for the communication can be of any kind: 
telephone, all mobile communication systems (NMT, GSM, WCDAM, radio, microwave 
communications; infra red communications .'..).' optical communication links/the Internet; ' ' 
any kind of electronic (computer-) bus system, .... • :v " v! ^ : : 

* Iifi Fig 3 th^re is.disfeloseii a flow chart of a method for giving authorization regarding 
payment from a' consumer to a retailer: The method begins at block'40.ThereVfter;'at block 42, 
the method continues in that said consumer dials, e.g. using his/her GSM telephone, : a paymerit ; 
idfehtificatiohV;e.g/a specific GSM number/ for a retiiier of irite^ 
unit receives said payment identification for said retailer of interest and said consumers 
identification, e.g. by retrieving the consumer's GSM number and the specific GSM payment 
number from the consumer's telephone call without opening a telephone connection. The method 
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then continues at block 44 in that a point of sale unit for said retailer sends all payment data to 
said authorization unit. Thereafter, at block 46, a data base in- said authorization unit- checks the 
validity information regarding said consumer and said retailer of interest before a decision is 
r ' made whether said payment authorization is provided. Thereafter, at block 48, if said payment 
authorization is provided; said point of sale unit delivers any kind of purchase proof for said 
retailer of interest and/or for said consumer. At block 50 the method is completed. 

If said payment authorization is not provided, said authorization unit stops the . - 

method. 

In Fig 4 there is disclosed a schematic exemplification of a specific application of a 
method-for automated and targeted advertising in which a consumer 62 uses a financial 
benefit which is linked to an advertisement sent to him by the advertisement system 72. The 
advertisement system 72 is linked to an electronic payment system 74, e.g: the payment 
system as described above. 

The method begins with step 50. The steps 50 to 60 are consecutive in time. 
In step 50 an advertiser 64 asks the advertisement system 72 to send a specific 
advertisement message to a specific group of consumers and specifies a financial benefit 
coupled to the advertisement. 

In step 52 the advertisement system's 72 data base 68, which e.g. uses earlier 
consumer purchase behavior stored in the electronic payment system database, is used to 
define the targeted group of consumers. The advertisement system 72 also logs in its database 
68 which consumers are targeted for the advertisement message. 

In step 54 the advertisement system's computing unit 66 receives the list of targeted 
consumers from its data base 68. 

In step 56 the advertisement system 72 sends the specific advertisement messages to 
all of the targeted consumers. 

v In step 58 a targeted consumer 62 purchases a number of items, among which one or 
more items for which the consumer received an advertisement, message. The consumer uses 
the electronic payment system 74 for the purchase. -<> : 

v . During step 60, which is part of the clearing of the purchase in the electronic 
payment system 74, the electronic payment system retrieves the advertisement reduction fare "■. 
information: from the advertisement system 72 and takes the reduction automatically into 
account.- " . - ^ - ■ •>-•• >; — «*•»..- 

A specific realization of the system contains a GSM based payment system, the 
advertisement system provider is the same as the electronic system provider, the database 68 
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is the same as the memory means 22, and the advertisement messages are in the form of SMS 
messages. • 

* Specificaily the present ihvention provides a system for the authentication and' * 
identification of a user to provide said user access to a service. It is based on the retrieval of 
the so called CLI-number (clearing number), sometimes named A-number (calling party). 
The CLI-number is a number that is part of the phone communication protocol and which can 
be retrieved by ~th^ receiver of a telephone call without having to open the established call 
connection. Such a refusal of opening a telephone connection line is accomplished by 
adapting a destination telephone device, such as a modem, telephone, mobile phone etc. A 
telephone device can be adapted by activating a specific switch, or by pro^ the 
device. 

The system comprises at least four sub-systems, which are the user, the service unit, 
the clearing unit and a computer database. Optionally it can include an additional 
identification unit or an additional computer database. 

A user is any juridical person or any technological device that can send a telephone 
signal via an interface, for ^^example, a GSM telephone or the like. 

Said service unit has access to at least one processing unit and communication means 
with the clearing unit, such as a telephone modem. The service unit is the element that is 
providing a service response to a user. It can also comprise a keyboard or keypad for 
additional input of data such as PIN code. A place for a service unit to be situated could be a 
shop or any other place where a sale or money transfer is taking place. 

The clearing unit comprises at least one processor unit. It can be situated, for 

example/at a bank or other financier facilities. ......... 

Said computer database and the additional computer database comprises at least 
information related id the provided service and to the users having access to the service. 
A possible additional identification unit can comprise means of biometric or electronic 



identification, eig. fingerprint recognition or PIN-code recognition. 

In aii^embodiment of the present invention illustrated in Fig. 5, the user &0 >1s calling 



a phone number, which' coiresponcis ' to the phone number of a modem in tKe'service unit 82T 

The service unit 82, without establishing a communication, retrieves 84 the CLI- 
number of the user ami refuses the call. The 'CLI-number is then transferred 86 to the clearing" ~ 1 ' 
unit 88 by means of communication known in the art. Said clearing unit 88 checks if the 
received CLI-number is stored in the computer database 90 and if "so, looking ; for 92 ~ 
information corresponding to said CLI-number. If the CLI-number is stored in the computer 
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-database and if the related information qualifies the user of that CLI-number to have access to 
; the said^ an access confirmation 94 to-the service-unit 82 by 

means -of conraj^icsy^99;]cno^ in the art. The service is then provided to the user by the 
service unit 82: The clearing unit 88 can optionally send 'information related to the service to 
the user, for example, confirmation of a successfully provided service by means of 
communication 96, for example, GSM telephone or the like by sending an SMS message 
..(Short Messages Services) to the user or a print out if the service unit 82 comprises. a printer. 

Another embodiment of the present invention is illustrated in Fig. 6, based on the 
embodiment illustrated in Fig. 5 and being identical to the embodiment in accordance with 
Fig, 6,:except that an additional identification unit 100 is added. The service is only provided ... 
if the service unit 82 receives the access confirmation 94 and if the user is identified 102, 104 
by the additional identification unit 100. 

In yet another embodiment illustrated in Fig. 7, the clearing unit 14 comprises at 
least one modem. The user 80 is calling a phone number which corresponds to the phone 
number of the modem of the clearing unit. The clearing unit 88, without establishing the 
communication, retrieves the CLI-number 106 of the calling device, whereby the clearing unit 
88 checks if the received CLI-number is stored in the computer database 90 and if so, looking 
for information 92-corresponding to the said CLI-number. If the CLI-number is stored in the 
computer database 90 and if the related information qualifies the user of that CLI-number to 
have access to the said service, the clearing unit 88 sends an access confirmation 94 to the 
service unit 82 by said means of communication. A requested service is then provided to the 
user by the service unit 82. The clearing unit can optionally send 96 information related to the 
service to the user, for example, confirmation of a successfully provided service by means of 
communication such as a GSM telephone or the like. The service unit can optionally send 98 
a print out of a receipt. ........ , 

; r i Still another embodiment of the present invention illustrated in Fig. 8, based on the . 
embodiment according to Fig. 7 and being identical to it except for an additional identification 
unit ,100 added. : Jhe. service is ; only provided if the service unit 82 receives access 
confirmatipn94 1 andjf the user is identified 102, 104 by the additional identification unit 82. : 

♦ A further: embodiment ofthepresent in vent ion is based on any of the previous. - , 
embodiments and -illustrated in Fig. 9. In this embodiment one possible service is described : 
more in- detail. The present invention provides a service regarding a payment from one party, - 
i.e., the user 80, to another third. party 108, for example, a retailer. In this embodiment, the . . 
service unit 82 further includes means for receiving 1 10 the amount of money the user owes 
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to the third party 108, e.g. via a keyboard or via an electronic interface to a cash box. If the ' 
accessxonfirmation 94 is jdelivere&to the service unit 82 and if, optionallyrthe user is _ u 
identified by. the, additional .identification unit 108, the service unit 82 transfers,! 12 the \\. 
amount of money the user owes to the third party 108 to the clearing unit 88 communication. 
5 The clearing unit 88 stores 1 14 the amount of money in the computer database 90. The 
amount of money is then invoiced to the user 80. 

. . . . .A still, further embodiment of the present invention is based on any of the 
previous embodiments and illustrated in Fig. 10. In this embodiment one possible service is 
described more in detail. The present invention provides a service regarding the access of the 
, 10 user 80_to.a facility,*for,example^the present invention provides the key to access a protected 
room. If the access confirmation 94 is delivered to the service unit 82, the service unit 82 
sends an unlock signal 1 1 6 to the locked door lock 1 1 8. Subsequently, the door is unlocked by 
known electrical or mechanical means and the user 12 has access to the facility. The present 
invention provides increased security compared to standard, physical keys. Firstly, as soon as 
15 the user loses his phone and the corresponding CLI-number, the CLI-number can be 

withdrawn from the access list to the facility and, secondly, the phone number the user has to 
call to in order to get access, can be kept secret. This means that, even if the user loses his 
phone, a burglar still does not have access to the facility without knowing the phone number 
to call. Furthermore, any mechanical, electrical or electronic means giving access to the 
20 facility on the outside of the facility, for example, keypads for code entries are not necessary 
anymore. The present inventions physical means can all be installed inside the facility to be 
entered, which reduces considerably the risk of destruction of the access means. The inside 
attachment also can.prevent a person from noticing an alarmed facility. 

Another embodiment of the present invention is based on embodiments in 
25 accordance with Fig. 5 to Fig. 8. In this embodiment one possible service is described more in 
detail. The present invention provides a service regarding the purchase of a ticket, for 
example, to access a : cinema, a museum, a theatre, a train etc. In this embodiment, the phone 
number the user 80 is calling is related to the kind of ticket the user would like to. purchase, 
for example,, which, mo vie the user 80 would like to see. The clearing unit 88 communicates 
.30 by means of communication with the computer database 90 which contains the. information of 
the availability of the ticket the user wishes to purchase. If the access confirmation 94 is 
delivered to the service unit 82 and if the clearing unit 88 retrieves the information from the 
computer database 90 that there is at least one ticket left to be purchased, and if, optionally, 
the user is identified by the additional identification unit 100 the clearing unit 88 stores the 
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prize of the ticket, which is related to the number the user 80 called in the computer database 

* ?Q in-a field that ^corresponds to the retrieved CLI-number. The amount of money is then i - 

- »i Jny™:^ database 90 is updated to the number of tickets left 

to be purchased, 

5 ■ * It is appreciated that the means mentioned above can be software means or a 

combination of software and hardware means known in the art per se, but not in the way they 
are used or provided jn the present invention. - 

It. should be understood that the invention is not restricted to the aforedescribed and 
illustrated exemplifying embodiments thereof, and that modifications can be made within the 
..10-^.scopp.of»th^ 



